Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          OnjNqoWnGh5O9wX7w6GnvFy6bZ23Hzfo8D09j6kz/cA=
Subject key identifier:   BD:98:62:DD:60:8E:79:FF:D0:55:79:BD:8E:56:C1:89:BC:0F:8B:69
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       6BBB129B51AEFFC2DCF1671F343F0343E224A26C
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:40 +0000
ROA not before:           Tue 04 Feb 2025 18:23:40 +0000
ROA not after:            Tue 03 Feb 2026 18:28:40 +0000
asID:                     52253
IP address blocks:        190.108.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bb:12:9b:51:ae:ff:c2:dc:f1:67:1f:34:3f:03:43:e2:24:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:40 2025 GMT
            Not After : Feb  3 18:28:40 2026 GMT
        Subject: CN=BD9862DD608E79FFD05579BD8E56C189BC0F8B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:ed:a4:07:25:79:ce:54:5a:43:5a:66:72:
                    7e:8c:c0:15:db:4e:06:fc:b5:9c:14:19:03:67:2c:
                    72:ff:3f:a0:f4:fe:06:71:b0:4b:b4:17:a1:a6:24:
                    ef:46:7c:41:01:e7:98:f5:7c:7d:72:be:21:01:a1:
                    dd:ab:92:1c:75:e8:88:22:94:c4:99:46:dc:f6:ca:
                    63:75:9e:0d:d1:e2:97:5e:91:4a:8d:22:d2:a8:76:
                    4b:39:8d:ad:34:e0:b1:e9:a4:15:65:72:14:f6:d9:
                    f4:21:d5:b8:35:c6:3c:ef:6c:a0:1e:fb:7c:39:8f:
                    f0:28:ba:c8:c0:68:ea:75:c8:0f:84:9f:5e:f3:87:
                    7e:8c:ae:f4:48:9a:61:a1:69:e3:0f:c0:a7:80:42:
                    e5:4b:ff:44:23:a4:b8:06:f0:0f:f7:91:02:be:a5:
                    40:ba:12:de:98:a6:a8:2e:28:a1:1b:aa:56:ba:84:
                    b4:a2:ab:64:3e:59:03:8d:9d:5c:de:72:55:93:eb:
                    34:c6:bf:99:21:ec:43:25:a2:3b:d9:a8:a4:95:2b:
                    e7:dc:6e:c7:60:aa:d5:fc:30:f6:42:67:ba:26:c2:
                    d2:6b:6a:7d:d4:b1:47:fc:5d:7f:c0:0b:5f:9d:15:
                    a8:25:14:9c:74:ac:9c:00:b7:c7:34:72:6d:20:2f:
                    56:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:62:DD:60:8E:79:FF:D0:55:79:BD:8E:56:C1:89:BC:0F:8B:69
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:fb:77:f9:b5:7d:12:9f:2e:59:5c:ff:a8:5f:17:1d:ad:
         02:f9:72:cc:7c:a0:e9:b1:31:ef:20:01:39:7a:ee:6f:52:38:
         a1:fc:26:d5:1d:b0:f1:f4:48:0d:c6:db:19:76:10:cb:be:8b:
         93:15:85:da:7f:68:8c:eb:29:19:b5:32:cd:44:88:ee:02:16:
         20:6b:bc:68:15:ae:fb:f3:27:ec:b9:c1:0d:6a:9b:60:56:42:
         46:7f:6c:f6:ff:16:8b:75:f5:99:fe:a1:d7:97:18:60:23:4b:
         5d:22:b8:07:52:fc:79:53:d8:24:49:c4:92:ed:bf:d1:76:db:
         d0:cc:36:46:c5:75:6e:ec:5f:3f:16:e3:2a:2f:09:0f:50:28:
         e5:51:06:3d:94:45:c9:86:7e:50:d0:73:7f:51:00:83:8b:75:
         72:ef:d1:a2:66:e2:20:91:9e:56:ca:20:fc:d2:5d:7e:9d:35:
         06:12:29:65:75:96:fa:f4:96:47:fe:37:99:ea:2e:93:80:0b:
         ce:ad:af:6c:52:2b:9a:ee:ea:11:bb:59:be:83:38:1b:2c:60:
         7a:ca:7e:b1:a9:df:91:16:ee:4f:a8:59:7e:20:1b:79:dd:d4:
         60:00:8a:ea:64:9e:8b:b9:e1:7c:02:e9:8c:54:bf:09:c6:37:
         7e:2c:1d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:33 2025 by rpki-client